------------[ cut here ]------------
WARNING: CPU: 0 PID: 16085 at kernel/dma/mapping.c:188 dma_map_sgtable+0x138/0x148 kernel/dma/mapping.c:264
Modules linked in:
CPU: 0 PID: 16085 Comm: syz-executor.0 Not tainted 5.19.0-rc8-syzkaller-01618-g680fb5b009e8 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/20/2022
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : dma_map_sgtable+0x138/0x148 kernel/dma/mapping.c:264
lr : __dma_map_sg_attrs kernel/dma/mapping.c:188 [inline]
lr : dma_map_sgtable+0x134/0x148 kernel/dma/mapping.c:264
sp : ffff80001ec3bc80
x29: ffff80001ec3bc80 x28: ffff0000f27b1a40 x27: 0000000000000000
x26: 0000000000000000 x25: 0000000000000000 x24: ffff0000f9859200
x23: 0000000000000004 x22: ffff0000c5598800 x21: 0000000000000001
x20: 0000000000000000 x19: ffff0000f9859700 x18: 00000000000000c0
x17: ffff80000dcfd698 x16: ffff80000db3b658 x15: ffff0000f27b1a40
x14: 0000000000000094 x13: 0000000000000000 x12: 0000000000040000
x11: 0000000000000c46 x10: ffff800013245000 x9 : ffff8000081f3ef8
x8 : 0000000000000c47 x7 : 0000000000000000 x6 : 000000000000003f
x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000000
x2 : 0000000000000001 x1 : 0000000000000001 x0 : 0000000000000002
Call trace:
 dma_map_sgtable+0x138/0x148 kernel/dma/mapping.c:264
 get_sg_table+0x84/0xe4 drivers/dma-buf/udmabuf.c:75
 begin_cpu_udmabuf+0x60/0x9c drivers/dma-buf/udmabuf.c:129
 dma_buf_begin_cpu_access+0x80/0x110 drivers/dma-buf/dma-buf.c:1186
 dma_buf_ioctl+0x240/0x288 drivers/dma-buf/dma-buf.c:364
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:870 [inline]
 __se_sys_ioctl fs/ioctl.c:856 [inline]
 __arm64_sys_ioctl+0xd0/0x140 fs/ioctl.c:856
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall arch/arm64/kernel/syscall.c:52 [inline]
 el0_svc_common+0x138/0x220 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x48/0x154 arch/arm64/kernel/syscall.c:206
 el0_svc+0x58/0x14c arch/arm64/kernel/entry-common.c:624
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:642
 el0t_64_sync+0x18c/0x190
irq event stamp: 394
hardirqs last  enabled at (393): [<ffff80000bfb6b1c>] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline]
hardirqs last  enabled at (393): [<ffff80000bfb6b1c>] _raw_spin_unlock_irqrestore+0x48/0x8c kernel/locking/spinlock.c:194
hardirqs last disabled at (394): [<ffff80000bfa4314>] el1_dbg+0x24/0x5c arch/arm64/kernel/entry-common.c:395
softirqs last  enabled at (384): [<ffff80000801c340>] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32
softirqs last disabled at (382): [<ffff80000801c30c>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19
---[ end trace 0000000000000000 ]---